CompTIA Security+ Labs

Please follow these labs to get hands-on experience for your CompTIA Security+ exam [SY0-601]. All the labs use free tools. We STRONGLY suggest you use a virtual machine such as VMware or Virtualbox for these labs to avoid exposing your home PC or laptop. NEVER configure these labs at work using your employers’ PCs.

The full video course is available on this website. The printed and Kindle versions of the book are available on Amazon.

Lab 1 – Credential Harvesting Using Site Cloning  

Lab 2 – Nmap  

Lab 3 – Recon-ng  

Lab 4 – Conducting a dictionary attack to crack online passwords using Hydra  

Lab 5 – Conducting a Cross Site Scripting (XXS) attack  

Lab 6 – Automating SQL injection using SQLmap  

Lab 7 – How to use Burp Suite to intercept client-side requests  

Lab 8 – Information Gathering using theHarvester  

Lab 9 – Evil twin attack with airgeddon  

Lab 10 – Using Curl Tool  

Lab 11 – Using Traceroute in Linux  

Lab 12 – Ping and its various uses  

Lab 13 – How to SSH into a server from a Windows machine using PuTTY  

Lab 14 – How to SSH into a server from a Linux machine  

Lab 15 – How to setup your own Kali Linux virtual machine  

Lab 16 – Nslookup Command  

Lab 17 – Dig Command  

Lab 18 – Using ipconfig to view and modify network information on Windows  

Lab 19 – Using ifconfig to view and modify network information on Linux  

Lab 20 – Hping for security auditing and testing of network devices  

Lab 21 – Using Netstat command to view networking information  

Lab 22 – Netcat  

Lab 23 – IP Scanners  

Lab 24 – Using ARP command for network reconnaissance  

Lab 25 – Using the route command to display network information on Linux  

Lab 26 – Using Scanless for easy anonymous port scanning  

Lab 27 – Directory Traversal  

Lab 28 – Gathering DNS information with dnsenum  

Lab 29 – How to connect to an internal network using OpenVPN  

Lab 30 – How to crack passwords with Hashcat  

Lab 31 – Fuzzing with Spike  

Lab 32 – Spoofing your MAC address with macchanger  

Lab 33 – Perform a network vulnerability scan with OpenVAS  

Lab 34 – Automate WordPress scanning with wpscan  

Lab 35 – Hack WPS with Reaver  

Lab 36 – Cross Site Request Forgery (CSRF)  

Lab 37 – Using gobuster to discover directories  

Lab 38 – Using Burp Suite’s Intruder  

Lab 39 – Manual SQL Injection  

Lab 40 – Broken Access Control  

Lab 41 – Getting a reverse shell on a server through a file upload  

Lab 42 – Manual privilege escalation using python  

Lab 43 – Web application vulnerability scanning with Nikto  

Lab 44 – Web server vulnerability scanning with Zed Attack Proxy  

Lab 45 – Capturing password hashes with Responder  

Lab 46 – Monitoring Wi-Fi signals with Kismet  

Lab 47 – Sn1per  

Lab 48 – Browser Exploitation Framework (BeEF)  

Lab 49 – Hacking WPS networks with Wifite  

Lab 50 – Capturing credentials submitted through http with Wireshark  

Lab 51 – Packet capture with tcpdump  

Lab 52 – How to discover nearby Wi-Fi networks with Airodump-ng  

Lab 53 – How to capture a WPA handshake file using Airodump-ng and Aireplay-ng  

Lab 54 – How to crack WPA handshake files using Aircrack-ng 

Lab 55 – Using proxychains for anonymous hacking. 

Lab 56 – How to use MD5 Checksums to determine if a file contains malware 

Lab 57 – How to use Process Explorer to find and scan suspicious processes for malware 

Lab 58 – Fundamental Linux Concepts 

Lab 59 – Linux Operations Advanced Linux Operations 

Lab 60 – Basic File Operations 

Lab 61 – Advanced File Operations 

Lab 62 – Cracking Basic Hashes with John the Ripper 

Lab 63 – Cracking Advanced Hashes with John the Ripper 

Lab 64 – More Advanced Uses of John the Ripper 

Lab 65 – Establishing a reverse shell with netcat 

Lab 66 – Establishing a bind shell with netcat 

Lab 67 – How to stabilise netcat shells 

Lab 68 – Getting a reverse shell using socat 

Lab 69 – Establishing a bind shell using socat 

Lab 70 – Establishing a stable socat shell 

Lab 71 – Upgrading a limited shell to Meterpreter shell using Metasploit 

Lab 72 – Exploiting a vulnerable FTP service to gain a shell using Metasploit 

Lab 73 – Running a vulnerability scan with Nessus 

Lab 74 – Creating Metasploit payloads with Msfvenom 

Lab 75 – Establishing a reverse shell on a Linux target using Msfvenom and Metasploit 

Lab 76 – Establishing a bind shell on a Linux target using Msfvenom and Metasploit 

Lab 77 – Basic Meterpreter commands 

Lab 78 – More Advanced Meterpreter Commands 

Lab 79 – Introduction to Bash Scripting 

Lab 80 – More Bash Scripting 

Lab 81 – Advanced Bash Scripting 

Lab 82 – How establish a Meterpreter shell on a Windows target using SET 

Lab 83 – How to migrate to a different process on the target machine after establishing a Meterpreter shell 

Lab 84 – How to use Mimikatz to extract all the passwords from a Windows machine 

Lab 85 – How to enumerate for privilege escalation on a Windows target with winPEAS 

Lab 86 – How to enumerate for privilege escalation on a Linux target with LinPEAS 

Lab 87 – OWASP A1 – OS Command Injection 

Lab 88 – OWASP A2 Broken Authentication and Session Management – Username enumeration vulnerability 

Lab 89 – OWASP A3 – Sensitive Information Disclosure 

Lab 90 – OWASP A4 EML External Entities (XXE) 

Lab 91 – OWASP A5 Broken Access Control 

Lab 92 – OWASP A6 Security Misconfiguration 

Lab 93 – OWASP A7 – Cross Site Scripting (XSS) 

Lab 94 – OWASP A8 – Insecure Deserialization 

Lab 95 – OWASP A9 – Using components with Known Vulnerabilities 

Lab 96 – OWASP Top 10 – A10 Unvalidated Redirects and Forwards 

Lab 97 – Introduction to Python scripting 

Lab 98 – More Python Scripting 

Lab 99 – More Advanced Python Scripting 

Lab 100 – Introduction to scripting with PowerShell 

Lab 101 – More Advanced Scripting with PowerShell 

· Posted by Superadmin on September 15 2022 · 0 Comments · 213 Reads ·